Author

Topic: [ESHOP launched] Trezor: Bitcoin hardware wallet - page 220. (Read 966173 times)

sr. member
Activity: 441
Merit: 268
Are you using a 3D printing manufacturing process to achieve this with the plastic edition?

No. We use mold casting. That's why the initial costs were quite high.
newbie
Activity: 16
Merit: 0
It looks like this point has been touched on before but :

I'd love to buy a Trezor... but a price of $ 697 for the plastic unit is far too high (according to Mt Gox the price of BTC is currently 697 USD and the plastic Trezor is 1 BTC).

Are the creators of this device intending on reducing the price ?
legendary
Activity: 3430
Merit: 3080
What prevents someone from opening it up? Is the case epoxy so that it will self destroy if opened?

It is very hard to open the case without breaking the electronics inside. Also keys are encrypted in chip, so even if someone is able to dump the contents it does not help.

Are you using a 3D printing manufacturing process to achieve this with the plastic edition? (I realise that CNC is traditional subtractive manufacturing, so I guess not with the aluminium edition)

If no, then once you build some more momentum with these devices, please consider additive (3D printed) techniques for mark 2 or mark 3. You could make the shell from a single piece (even in a metal edition). The design of that case could be optimised further, and maybe make it 100% impossible to open without destroying your FLASH (or EEPROM?) memory chip.
newbie
Activity: 15
Merit: 0
Is it possible to image it and brute force pin bypassing delays between retry ?

more on that please
hero member
Activity: 964
Merit: 509
IS it waterresistant?!

No, source: product comparison in post #902
full member
Activity: 154
Merit: 100
IS it waterresistant?!
sr. member
Activity: 441
Merit: 268
Does Trezor have protection against differential power analysis?

Power analysis requires lots of trials. While this can be done on smart-cards where no user interaction is needed, one cannot perform this effectively on TREZOR, because each trial requires entering of the PIN.

What prevents someone from opening it up? Is the case epoxy so that it will self destroy if opened?

It is very hard to open the case without breaking the electronics inside. Also keys are encrypted in chip, so even if someone is able to dump the contents it does not help.

Does Trezor leak any sort of sonic or other emissions which could help an adversary find the pin?

No.
hero member
Activity: 714
Merit: 510
paper wallet support encryption, anti teft, disaster recovery if you are not dumb and duplicate them, waterproof with revlar paper

dont underestimate paper  Smiley

for Trezor physical hack proof, are you sure the chip don't leak data while under physical torture?

the device self destruct or at least delete keys in secure way if to much fasle pin are entered?


if somebody steals TREZOR then:
http://www.bitcointrezor.com/faq/#somebody-steals-trezor

We can still think about automatically wiping the device after XY bad intents, but what if somebody really forgets his PIN (happend to me after being 3 weeks out of the office and couldn't get in) and also loses the recovery seed (which is rather an unfortunate combination) but then has no chance to get to his coins...


Does Trezor have protection against differential power analysis?

What prevents someone from opening it up? Is the case epoxy so that it will self destroy if opened?

Does Trezor leak any sort of sonic or other emissions which could help an adversary find the pin?

These are important security questions because Trezor is not the only product out there and many of us know a bit about how to crack some of the other products already. Smart cards are notoriously weak against side channel attacks for instance.




member
Activity: 97
Merit: 10
Is it possible to image it and brute force pin bypassing delays between retry ?

Interesting question, but i assume you could on top of requiring a pin, allow to encrypt the wallet on the device. So even if you break into it using the pin, you are faced with brute forcing the wallet which cannot be done easy if a secure enough password was chosen.
sr. member
Activity: 441
Merit: 268
How difficult is it to open the TREZOR and directly read the data?

It is impossible to open TREZOR without effectively destroying the case. Also the data inside is encrypted so dumping it is not helping ...
legendary
Activity: 1708
Merit: 1020
Quote
If somebody steals my Trezor, they'll just empty out my wallet before I have the chance to restore anyway. Right?

Not at all. All operations on TREZOR require the user to enter a PIN. The attacker would have to guess your PIN which is very difficult because with each badly entered PIN the time for entering it anew increases exponentially. For example, the delay between 19th and 20th PIN entering is 35 hours. Unplugging and plugging the device won’t help. The thief would have to sit his life off entering the PINs. Meanwhile you have enough time to move your funds into a new device or wallet from the paper backup.
How difficult is it to open the TREZOR and directly read the data?
cor
full member
Activity: 121
Merit: 100
paper wallet support encryption, anti teft, disaster recovery if you are not dumb and duplicate them, waterproof with revlar paper

dont underestimate paper  Smiley

for Trezor physical hack proof, are you sure the chip don't leak data while under physical torture?

the device self destruct or at least delete keys in secure way if to much fasle pin are entered?


if somebody steals TREZOR then:
http://www.bitcointrezor.com/faq/#somebody-steals-trezor

We can still think about automatically wiping the device after XY bad intents, but what if somebody really forgets his PIN (happend to me after being 3 weeks out of the office and couldn't get in) and also loses the recovery seed (which is rather an unfortunate combination) but then has no chance to get to his coins...
legendary
Activity: 2912
Merit: 1060
Yeah have a native English copywriter go over it. Hack proof also doesn't sound right to me. Otherwise nice chart.
cor
full member
Activity: 121
Merit: 100
i'm not a native speaker myself, but maybe "battery usage" might be more common? of course you would mark the "no" green in this case.

that makes better sense.. when thinking of this we even came up with "batteryless" but we stopped ourselves from writing it down Smiley

what about "litecoin support"? cannot find it in the table..

good point. we'll include it.
thanks
sr. member
Activity: 390
Merit: 250
i'm not a native speaker myself, but maybe "battery usage" might be more common? of course you would mark the "no" green in this case.

what about "litecoin support"? cannot find it in the table..
legendary
Activity: 2912
Merit: 1060
I think without battery is bad English
cor
full member
Activity: 121
Merit: 100
We're having quite frequent questions about why is TREZOR better than "...".

So we prepared a table comparison of the main features of TREZOR with other tools that are being used as bitcoin storage.



Before posting it to our website, I'd like to ask you for your opinion, mainly to see if the comparison is:

  • easy to understand (our english :-) as well as the logic)
  • correct (because we intent no harm to anybody)

   
Please don't hesitate to post comments, suggestions or questions. Thanks!
legendary
Activity: 1680
Merit: 1035
Besides, you do not know what the final pricing will be when you can order them off the shelve, might be even more expensive. I for sure won't pay todays' prices.
And you do not know if you can order them off the shelve when I already receive my pre-order.

Trezor's main competition is Bitcoin Armory and a cheap used laptop, which can be had for under $100 (and their "substitution" is paper wallets, or just risking it and not bothering with more advanced security systems). So if Trezor continues to sell for $100, they would mostly be making their sales on increased convenience of a single small device, versus a big laptop you have to set up with Armory yourself. They may also end up making more money if they sell it for way less than $100, since more people would be interested in buying it, but obviously not too much less, since the shrinking profit margin (sale price - cost to manufacture) will start cutting into their potential profit. If sales (X) versus price (Y) was graphed, the resulting profit graph would look like a bell curve. It will be up to Trezor to figure out where the top of that graph's hill is, and what price they will get the most revenue from.

So I am pretty sure the final price will be lower than $100, and if it isn't, I'll keep using Armory with the computer I already bought. I would like to buy a Trezor for my parents though, since they're planning on getting a few $K worth of BTC.
donator
Activity: 2772
Merit: 1019
Continually rising prices is part of the problem. Sure, you converted USD/EUR into bitcoins before preordering, and thus feel like you spent USD/EUR, but you could have just as well bought those bitcoins and held them until they started to ship, thus getting it cheaper anyway. The other part is the long development cycles and risk (I was under the impression that Trezor will come out in November, but now the preorder page says January 2014). BFL was a good lesson about long development cycles and risk, too. I think it would be better to support such projects through donations as opposed to preorders (better PR and easier to manage), or at the least reduce prices when things go haywire.

How is paying 2 BTC more for a metal instead of plastic casing not a donation? ;-)

I'm just throwing my money at these guys because their product is one of the most-needed products in bitcoin-land and I have huge trust in them to pull it off.

Wallet security is a huge huge problem and the trezor makes it a piece of cake for anybody to have a very reasonably secure wallet.

legendary
Activity: 1680
Merit: 1035
Continually rising prices is part of the problem. Sure, you converted USD/EUR into bitcoins before preordering, and thus feel like you spent USD/EUR, but you could have just as well bought those bitcoins and held them until they started to ship, thus getting it cheaper anyway. The other part is the long development cycles and risk (I was under the impression that Trezor will come out in November, but now the preorder page says January 2014). BFL was a good lesson about long development cycles and risk, too. I think it would be better to support such projects through donations as opposed to preorders (better PR and easier to manage), or at the least reduce prices when things go haywire.
Jump to: